Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
June 13, 2000
There is no mechanism to 'filter' Local Group Policy, as their is for GPO in Active Directory (AD).
You can fake it out, by applying NTFS deny access permissions on the Group Policy.
You can set Local Group Policy for users and deny the Administrator Read access to the
%SystemRoot%system32GroupPolicyUserRegistry.pol file, effectively filtering the Local Group Policy.
NOTE: See How can I prevent Local Group Policy from taking effect until I am finished configuring it?
You May Also Like